ScarCruft NarwhalRAT campaign
campaign · campaign:scarcruft-narwhalrat
ScarCruft (APT37) NarwhalRAT campaign: fake Microsoft OTP lures, a compiled-Python RAT, and pCloud dead-drop C2.
Coverage
0
first 2026-06-18 → last –
no data
Latest activity
–
no entry about it yet
Peak priority
·
no entry about it yet
Targets
·
no sector or region stated
Sources cited
0
0 hosts
Relationships explore in graph
Typed, source-stated connections from the entity registry; each edge cites the entry whose reporting establishes it.
attributed to
Story timeline
No published entries reference this entity yet.
Entries about ScarCruft NarwhalRAT campaign
No published entry is about this entity yet · an entry attaches by registry key, by the entity's name or a public alias in its title or body, or (for CVE entities) by exact CVE id.